This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/bf3eca-171f-401c-9b5d-ccc4f1e00990/1/LHJ9Cfuxmn-YXXUaIDEcG61LBx8.mft File: LHJ9Cfuxmn-YXXUaIDEcG61LBx8.mft (raw, json) Hash identifier: 3o9koc3P5BvBbMNyf94Gg1Ro2H28b1QVGoz0hgdDNjE= Subject key identifier: 7F:DC:5C:AF:A8:AF:2A:3E:F7:2D:FC:58:26:20:3A:AB:40:5B:3B:2E Authority key identifier: 2C:72:7D:09:FB:B1:9A:7F:98:5D:75:1A:20:31:1C:1B:AD:4B:07:1F Certificate issuer: /CN=2c727d09fbb19a7f985d751a20311c1bad4b071f Certificate serial: 019AF19ABBFDB566BF6D762F792EE2E9F4E9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LHJ9Cfuxmn-YXXUaIDEcG61LBx8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/bf3eca-171f-401c-9b5d-ccc4f1e00990/1/LHJ9Cfuxmn-YXXUaIDEcG61LBx8.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 03:00:41 +0000 Manifest this update: Sat 06 Dec 2025 03:00:41 +0000 Manifest next update: Sun 07 Dec 2025 03:00:41 +0000 Files and hashes: 1: 9phsu2p4WF8NqnfUkSWWdnt6zzA.roa (hash: f41MILFdl6rcNDj7+ORCxwVOJlnjfxd2bAX97uHKrtw=) 2: LHJ9Cfuxmn-YXXUaIDEcG61LBx8.crl (hash: rp5SJnHMLr0ImglLqUcNdWPEPlKU0tjzmFcbSu4wIJw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/bf3eca-171f-401c-9b5d-ccc4f1e00990/1/LHJ9Cfuxmn-YXXUaIDEcG61LBx8.crl rsync://rpki.ripe.net/repository/DEFAULT/2c/bf3eca-171f-401c-9b5d-ccc4f1e00990/1/LHJ9Cfuxmn-YXXUaIDEcG61LBx8.mft rsync://rpki.ripe.net/repository/DEFAULT/LHJ9Cfuxmn-YXXUaIDEcG61LBx8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:bb:fd:b5:66:bf:6d:76:2f:79:2e:e2:e9:f4:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2c727d09fbb19a7f985d751a20311c1bad4b071f Validity Not Before: Dec 6 03:00:41 2025 GMT Not After : Dec 7 03:00:41 2025 GMT Subject: CN=7fdc5cafa8af2a3ef72dfc5826203aab405b3b2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:9f:ec:7e:47:ab:cb:95:51:7e:71:a5:5b:a6: 9b:d3:c3:df:87:66:5a:7c:61:7f:f9:f2:c9:70:2e: 7e:4c:a2:47:4a:e1:73:e9:5e:dc:c5:35:9b:11:aa: 75:81:f4:9e:54:37:64:72:86:70:69:97:89:94:6d: ee:1f:ae:f6:07:b4:be:17:fc:d2:1b:3e:dc:76:6c: af:9a:00:5b:c7:73:d7:91:f7:e8:15:e1:fd:39:ea: 02:23:20:6a:aa:47:b0:42:7d:7f:fc:32:18:f7:54: cf:b2:a8:c0:99:4e:2f:1a:8d:ac:50:ee:e7:90:8e: 64:34:00:17:bb:8e:58:f2:9c:26:d5:ad:14:d1:6c: b6:38:9d:29:f7:27:c3:24:5b:82:fd:62:c1:5a:1f: fd:19:e8:71:91:ee:44:d0:ef:e8:12:c7:f8:57:1c: af:cb:ba:26:14:38:6e:e1:dd:18:33:0d:33:bb:af: b8:13:de:06:3a:1e:14:ea:5a:29:29:09:87:86:4d: c3:cd:94:0f:9c:9d:24:8e:68:eb:5e:56:db:52:62: 8a:1f:8a:6e:18:12:be:28:30:94:e9:1b:8c:66:ec: cb:20:e7:f5:72:c2:5b:a7:9e:56:ad:44:07:6a:65: 79:7a:ed:42:e4:2a:af:b9:47:f7:d0:88:2e:a7:cc: 04:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:DC:5C:AF:A8:AF:2A:3E:F7:2D:FC:58:26:20:3A:AB:40:5B:3B:2E X509v3 Authority Key Identifier: keyid:2C:72:7D:09:FB:B1:9A:7F:98:5D:75:1A:20:31:1C:1B:AD:4B:07:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LHJ9Cfuxmn-YXXUaIDEcG61LBx8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/bf3eca-171f-401c-9b5d-ccc4f1e00990/1/LHJ9Cfuxmn-YXXUaIDEcG61LBx8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/bf3eca-171f-401c-9b5d-ccc4f1e00990/1/LHJ9Cfuxmn-YXXUaIDEcG61LBx8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:b0:13:d4:a8:e9:4d:d2:2c:a1:2e:89:ac:13:c0:f1:e7:d9: ba:34:a9:7c:40:b2:ea:c5:bf:0b:19:6d:43:77:d5:ab:eb:a7: b7:4f:26:ff:3b:92:fd:d1:52:a3:2f:1f:21:d1:09:89:a4:57: 8d:58:f9:24:00:f5:a4:5e:b4:84:ef:86:d9:39:89:14:6e:63: 80:c6:67:b9:74:f6:08:02:a1:69:8e:ae:d5:a5:95:c3:d2:5c: 76:fd:7e:a6:ab:1f:8e:1b:88:45:0b:a2:2f:5b:5f:df:17:77: e0:13:0e:38:6f:9e:fc:43:45:96:d7:69:b4:fd:2f:7e:7b:7f: 99:24:6b:56:ee:a0:18:49:cb:69:bb:8f:9a:e4:87:42:95:ed: e3:66:5b:d9:14:1f:1b:0a:4c:f5:48:b5:34:17:13:44:11:8d: 09:ff:81:61:56:9d:d2:09:35:68:b5:97:f4:61:b7:23:a2:f6: 6a:37:9d:59:f4:51:c7:99:1c:d7:e9:13:bb:2c:8f:b0:23:eb: 06:6d:6f:64:53:3f:66:34:34:32:2c:31:07:62:f7:c4:1e:1a: 11:9e:51:3b:d8:f9:74:d7:08:e6:06:e6:f5:c2:eb:1b:80:0d: 03:22:da:80:b9:1c:a8:fe:39:ed:aa:57:93:ee:1c:7f:c1:4a: fb:b0:0b:e9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmrv9tWa/bXYveS7i6fTpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJjNzI3ZDA5ZmJiMTlhN2Y5ODVkNzUxYTIwMzExYzFiYWQ0 YjA3MWYwHhcNMjUxMjA2MDMwMDQxWhcNMjUxMjA3MDMwMDQxWjAzMTEwLwYDVQQD Eyg3ZmRjNWNhZmE4YWYyYTNlZjcyZGZjNTgyNjIwM2FhYjQwNWIzYjJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyp/sfkery5VRfnGlW6ab08Pfh2Za fGF/+fLJcC5+TKJHSuFz6V7cxTWbEap1gfSeVDdkcoZwaZeJlG3uH672B7S+F/zS Gz7cdmyvmgBbx3PXkffoFeH9OeoCIyBqqkewQn1//DIY91TPsqjAmU4vGo2sUO7n kI5kNAAXu45Y8pwm1a0U0Wy2OJ0p9yfDJFuC/WLBWh/9Gehxke5E0O/oEsf4Vxyv y7omFDhu4d0YMw0zu6+4E94GOh4U6lopKQmHhk3DzZQPnJ0kjmjrXlbbUmKKH4pu GBK+KDCU6RuMZuzLIOf1csJbp55WrUQHamV5eu1C5CqvuUf30Igup8wEjwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH/cXK+oryo+9y38WCYgOqtAWzsuMB8GA1UdIwQY MBaAFCxyfQn7sZp/mF11GiAxHButSwcfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTEhKOUNmdXhtbi1ZWFhVYUlERWNHNjFMQng4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy9iZjNlY2EtMTcxZi00MDFjLTliNWQt Y2NjNGYxZTAwOTkwLzEvTEhKOUNmdXhtbi1ZWFhVYUlERWNHNjFMQng4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYy9iZjNlY2EtMTcxZi00MDFjLTliNWQtY2NjNGYxZTAwOTkw LzEvTEhKOUNmdXhtbi1ZWFhVYUlERWNHNjFMQng4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASbAT1Kjp TdIsoS6JrBPA8efZujSpfECy6sW/CxltQ3fVq+unt08m/zuS/dFSoy8fIdEJiaRX jVj5JAD1pF60hO+G2TmJFG5jgMZnuXT2CAKhaY6u1aWVw9Jcdv1+pqsfjhuIRQui L1tf3xd34BMOOG+e/ENFltdptP0vfnt/mSRrVu6gGEnLabuPmuSHQpXt42Zb2RQf GwpM9Ui1NBcTRBGNCf+BYVad0gk1aLWX9GG3I6L2ajedWfRRx5kc1+kTuyyPsCPr Bm1vZFM/ZjQ0MiwxB2L3xB4aEZ5RO9j5dNcI5gbm9cLrG4ANAyLagLkcqP457apX k+4cf8FK+7AL6Q== -----END CERTIFICATE-----Generated at Sat Dec 6 10:10:32 2025 by rpki-client